Attorney Docket: CC503326-003/1968NP 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



Listing of Claims: 

1 . (Previously presented) A computerized method of watermarking a software 
object comprising the steps of: 

(a) receiving an input sequence; and 

(b) storing a watermark in the state of the software object so that the 
watermark becomes detectable by a recognizer which examines the state of the software object 
when the software object is being run with the input sequence. 

2. (Previously presented) The method as claimed in claim 1, wherein the software 
object is a program or a piece of a program. 

3. (Previously presented) The method as claimed in claim 1 wherein the watermark 
is.detectable in the state of the software object formed by the current values held in at least one 
of: 

(a) at least one stack; 

(b) at least one heap; 

(c) at least one data register; and 

(d) at least one global variable; 
of the software object. 

4. (Previously presented) The method of claim 1 or 2 or 3 wherein the watermark is 
stored in an execution state of the software object whereby the input sequence is constructed 
which, when fed to an application of which the software object is a part, will make the software 
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object enter a second state which is a representation of the watermark, the representation being 
vaUdated or checked by examining the execution state of the software object. 

5. (Previously presented) The method of claim 1 wherein the watermark is 
embedded in an execution trace of the software object whereby, as a special input is fed to the 
software object, an address/operator trace is monitored and, based on a property of the trace, the 
watermark is extracted. 

6. (Previously presented) The method of claim 1 or 2 or 3 wherein the watermark is 
embedded in a topology of a dynamically built graph structure. 

7. (Previously presented) The method of claim 6 wherein the dynamically built 
graph structure is detectable in a data structure of the program. 

8. (Previously presented) The method of claim 1 , or 2 or 3 fiirther comprising the 

step of: 

(c) building a recognizer operable to examine the state of the software object 
when run with an input sequence and indicate whether the watermark is detectable in the state of 
the software object. 

9. (Previously presented) The method of claim 8 wherein the recognizer is a 
fimction adapted to identify and extract the watermark ft"om all other dynamic structures on a 
heap or stack. 

10. (Previously presented) The method of claim 8 wherein the watermark 
incorporates a marker that will allow the recognizer to recognize it easily. 

1 1 . (Previously presented) The method of claim 8 wherein the recognizer is retained 
separately fi-om the program and whereby the recognizer inspects the state of the program. 
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12. (Previously presented) The method of claim 8 wherein the recognizer is 
dynamically linked with the program when it is checked for the existence of a watermark. 

13. (Currently Amended) The method of claim 1, or 2, or 3 wherein the software 
object is a part of an application that io obfiiocatod or incorporates tamper-proofing code. 

14. (Previously presented) The method of claim 8 wherein the recognizer checks the 
watermark for a signature property. 

15. (Previously presented) The method of claim 14 wherein the signature property is 
evaluated by testing for a specific result from a hard computational problem. 

16. (Previously presented) A method of claim 14, wherein the watermark is 
embedded in a topology of a dynamically built graph structure, the method including the step of: 

(d) creating a number having at least one numeric property which is an index 
of the embedded dynamically built graph structure, whereby the signature property is evaluated 
by testing the at least one numeric property. 

17. (Previously presented) The method of claim 16 wherein the signature property is 
evaluated by testing whether the number is a product of two primes. 
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18. (Previously presented) The method of varying the integrity or origin of a program 
including the steps of: 

(a) watermarking the program with a watermark, wherein the watermark is 
stored in the state of a program so that the watermark becomes detectable when the program is 
being run with an input sequence; 

(b) building a recognizer, wherein the recognizer is adapted to extract the 
watermark from dynamically allocated data wherein the recognizer is kept separately from the 
program; wherein the recognizer is adapted to check for a number. 

19. (Previously presented) The method of claim 18, wherein the number is the 
product of two primes and wherein the number is the index of an embedded watermark graph in 
an enumeration of a class of watermark graphs each having a different topology. 

20. (Previously presented) The method of claim 18 wherein the number is derived 
from a combination of three or more prime numbers. 

2 1 . (Currently Amended) The method of claim 1 8 or 1 9 wherein the program is 
further adapted to be resistant to tampering, the resistance to tampering by moano of obfiiocation 
before or after compilation , or by adding tamper-proof code. 

22. (Previously presented) The method of claim 1 8 or 19 wherein the recognizer 
checks for the effect of the watermark on an execution state of the program, thereby preserving 
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an ability to recognize the watermark where semantics-preserving transformations have been 
appHed to the program. 

23. (Currently Amended) A method of watermarking software including the steps of: 

(a) embedding a watermark in a string; and 

(b) including in the software code that is stored in memory, the code when 
executed with at least one predetermined input reproduces the string of step (a), and that 
produces at least one other string when executed with at least one other input; 

wherein the code is included in the software using a an obfiiocating 
process that at loaot inhibits recognition of the string of step (a) by static or dynamic analysis. 

24. (Previously presented) A computerized method of watermarking software 
comprising the steps of: 

(a) choosing a watermark from a class of graphs having a plurality of 
members that are stored in memory, each member of the class of graphs having at least one 
property, the at least one property being capable of being tested by integrity-testing software; and 

(b) storing the chosen watermark in the software so that when the software is 
run with a predetermined input sequence, the chosen watermark is reproduced_and detectable by 
a recognizer which examines the state of the software object. 

25. (Previously presented) The method of claim 24 wherein the watermark is 
rendered tamperproof to certain transformations by subjecting the watermark graph to redundant 
edge insertion. 

26. (Previously presented) The method of claim 24 wherein the watermark is a 
watermark graph including at least one node and wherein each of the at least one node of the 
watermark graph is expanded into a cycle. 
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27. (Previously presented) A computerized method of fingerprinting software 

comprising the steps of: 

(a) providing a plurality of watermarked programs, having a watermark stored in a 
state of a software object for the program, the watermark being detectable by a recognizer which 
examines the state of the software object as the software object is being run v^th a particular 
input sequence. 

28. (Previously presented) The method of fingerprinting software as claimed in claim 
27 wherein the plurality of watermarked programs each of which has a number with a common 
prime factor. 

29. (Cancelled) 

30. (Previously presented) A computer readable medium including a program 
for watermarking a software object, the program including instructions for causing a computer to: 

(a) receive an input sequence through a data communication channel; and 

(b) storing a watermark in the state of the software object so that the 
watermark becomes detectable by a recognizer which examines the state of the software object 
when the software object is being run with the input sequence. 

3 1 . (Previously presented) A computer comprising: 
a software object; 

means to receive an input sequence; and 

a watermark stored in the state of the software object so that the watermark 
becomes detectable by a recognizer which examines the state of the software object when the 
software object is being run with a particular input sequence. 

32. (Previously presented) A method of fingerprinting software comprising the steps 

of: 
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(a) providing a plurality of watermarked programs, the plurality of 
watermarked programs being obtained by watermarking each program of the plurality of 
programs with a watermark, wherein the watermark is stored in the state of a program so that the 
watermark becomes detectable when the program is being run with an input sequence and 
building a recognizer wherein the recognizer is adapted to extract the watermark from other 
dynamically allocated data wherein the recognizer is kept separately from the program; wherein 
the recognizer is adapted to check for a number. 

33. (Previously presented) A computerized method of fingerprinting software 
comprising the steps of: 

(a) providing a plurality of watermarked programs, the plurality of 
watermarked programs being obtained by watermarking each program of the plurality of 
programs with a watermark, the watermark being obtained by embedding a watermark in a string 
and including in the software code that, when executed with at least one predetermined input 
reproduces the string so as to be detectable by a recognizer, and that produces at least one other 
string when executed with at least one other input. 

34. (Original) A method of fingerprinting software comprising the steps of: 
(a) providing a plurality of watermarked programs, the plurality of 

watermarked programs being obtained by watermarking each program of the plurality of 
programs v^th a watermark, the watermark being obtained by choosing a watermark from a class 
of graphs having a plurality of members, each member of the class of graphs has at least one 
property, the at least one property being capable of being tested by integrity-testing software and 
applying the watermark to the software. 
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35. (Previously presented) A computer-readable medium including a program for 
verifying at least one of the integrity and origin of a program, the program including instructions 
for: 

(a) watermarking the program with a watermark, wherein the watermark is 
stored in the state of a program so that the watermark becomes detectable when the program is 
being run with an input sequence; 

(b) building a recognizer wherein the recognizer is adapted to extract the 
watermark from other dynamically allocated data wherein the recognizer is kept separately from 
the program; wherein the recognizer is adapted to check for a number. 

36. (Previously presented) A computer-readable medium including a program for 
watermarking software, the program including instructions for: 

(a) embedding a watermark in a static string; and 

(b) including in the software code that, when executed with at least one 
predetermined input reproduces the string of step (a), and that produces at least one other string 
when executed with at least one other input. 

37. (Original) A computer-readable medium including a program for 
watermarking software, the program including instructions for: 

(a) choosing a watermark from a class of graphs having a plurality of 
members, each member of the class of graphs has at least one property, the at least one property 
being capable of being tested by integrity-testing software; and 

(b) applying the watermark to the software. 
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38. (Previously presented) A computer capable of verifying at least one of the 
integrity and origin of a program, the computer comprising: 
an input sequence; 

a v^atermark for watermarking the program, wherein the watermark is stored in 
the state of a program so that the watermark becomes detectable when as the program is being 
run with the input sequence; a recognizer, wherein the recognizer is adapted to extract the 
watermark from other dynamically allocated data wherein the recognizer is kept separately from 
the program, wherein the recognizer is adapted to check for a number. 



39. (Previously presented) A computer for watermarking software comprising: 

(a) a memory for storing data representing a string that has a watermark 
embedded in it; and 

(b) on obfiiocation a technique for including in software code that, when 
executed vdth at least one predetermined input reproduces the string so as to be detectable by a 
recognizer, and that produces at least one other string when executed with at least one other 
input. 



40. (Original) A computer comprising: 

a watermark from a class of graphs having a plurality of members, each member 
of the class of graphs has at least one property, the at least one property being capable of being 
tested by integrity-testing software; and 

soflM^are to which the watermark is applied. 
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41 . (Original) The method of claim 1 , wherein the watermark is detectable in any 
portion of the dynamic data state of the software object. 

42. (Original) The method of claim 1, wherein the software object is an 
executable media object. 

43. (Original) The method of claim 1 , wherein no part of the state of the software 
object in which the watermark becomes detectable is visually or audibly apparent. 

44. (Original) The method of claim 8, wherein the recognizer is built concurrently 
with the watermark and input sequence. 

45. (Original) The method of claim 16, wherein said graph is an enumeration of a 
class of possibly-embedded watermark graphs each having a different topology, 

46. (Original) The method of claim 18, wherein the recognizer is built 
concurrently with the watermark and input sequence. 

47. (Original) The method of claim 23, wherein the software code includes a state 
variable updated during execution of the code and that influences the string outputted. 

11 



Attorney Docket: CC503326-003/1968NP 

48. (Original) The method of claim 31, wherein no part of the state of the 
software object in which the watermark becomes detectable is visually or audibly apparent. 



49. (Original) A method of watermarking software including the steps of: 

(a) embedding a watermark in a string, thereby forming a watermark string; 

(b) converting the string into executable code that, when executed, constructs 
a dynamic string by: 

(i) receiving an input in the form of at least one input variable; 

(ii) defining and updating a string index variable that controls the 
location of writing to the dynamic string; 

(iii) defining a state variable and updating the state variable in a 
dynamically-determined fashion so that the value of said state variable in at least one read 
operation will vary depending on which of at least two execution paths was taken by said 
executable code to reach said operation; and 

(iv) dependent on said at least one input variable, string index variable 
and state variable, writing to the dynamic string; 

wherein the dynamic string reconstructs the watermark string for at least 
one predetermined input and not for the other inputs. 

50. (Previously presented) A method of watermarking a software object comprising the steps 
of: 

(a) providing an input sequence; and 
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(b) Storing a watermark in the state of the software object as the software object is 
being run with the input sequence, wherein the watermark is stored in an execution state of the 
software object whereby the input sequence is constructed which, when fed to an application of 
which the software object is a part, will make the software object enter a second state which is a 
representation of the watermark, the representation being validated or checked by examining the 
execution , of the software object. 

5 1 . (Original) A method of watermarking a software object comprising the steps of: 

(a) providing an input sequence; and 

(b) storing a watermark in the state of the software object as the software object is 
being run with the input sequence, wherein the watermark is embedded in an execution trace of 
the software object whereby, as a special input is fed to the software object, an address/operator 
trace is monitored and, based on a property of the trace, the watermark is extracted. 

52. (Original) The method of varying the integrity or origin of a program including the 
steps of: 

(a) watermarking the program with a watermark, wherein the watermark is stored in 
the state of a program as the program is being run with an input sequence; 

(b) building a recognizer, wherein the recognizer is adapted to extract the watermark 
fi-om dynamically allocated data wherein the recognizer is kept separately fi-om the program; 
wherein the recognizer is adapted to check for a number, wherein the recognizer checks for the 
effect of the watermark on an execution state of the program, thereby preserving an ability to 
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recognize the watermark where semantics-preserving transformations have been applied to the 
program. 

53. (Previously presented) A method of watermarking software including the steps of: 

(a) embedding a watermark in a string; and 

(b) including in the software code that, when executed with at least one 
predetermined input reproduces the string of step (a), and that produces at least one other string 
when executed with at least one other input; 

wherein the part of the code that manipulates dynamically allocated 
structures is constricted so that it is computationally difficult to statically determine whether it is 
safe to perform a transformation of the code incorporating the at least one opaque predicate or 
variable. 
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54. (Previously presented) A method of watermarking software including the steps 

of: 

(a) embedding a watermark in a string; and 

(b) including in the software code that, when executed with at least one 
predetermined input reproduces the string of step (a), and that produces at least one other string 
when executed with at least one other input; 

wherein at least a portion of the code incorporates at least one opaque predicate 
and the code is constructed so that it is computationally difficult to statically determine whether it 
is safe to perform a transformation of the code incorporating the at least one opaque predicate. 
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